Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa
File:                     M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa (raw, json)
Hash identifier:          YJH8XogGAiPVhNfpwNLuVtfRK7287F8OKKxG6tBIoNs=
Subject key identifier:   33:55:E1:50:16:80:CC:2A:2A:D5:5B:F2:08:6C:17:C8:56:C9:D8:0B
Certificate issuer:       /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial:       018CCA995E3A9471565E4E0D094E824D2A12
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa
Signing time:             Tue 02 Jan 2024 14:34:57 +0000
ROA not before:           Tue 02 Jan 2024 14:34:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197942
IP address blocks:        2001:67c:2384::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:99:5e:3a:94:71:56:5e:4e:0d:09:4e:82:4d:2a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
        Validity
            Not Before: Jan  2 14:34:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3355e1501680cc2a2ad55bf2086c17c856c9d80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:62:4f:26:fe:81:fc:f9:7a:3f:d7:df:14:
                    86:65:cd:7b:b4:3e:bd:47:cd:77:e5:a4:5b:83:fa:
                    68:a4:92:75:6c:ef:12:7c:c0:e0:2e:d8:5f:86:db:
                    12:85:bd:fe:31:b8:7b:6f:c9:dd:32:51:b6:5c:4a:
                    b4:43:d1:23:b4:14:23:74:fa:49:07:8b:9e:06:89:
                    cf:05:db:ee:b7:ea:ea:10:1d:df:37:97:46:99:09:
                    bd:a2:86:05:f7:90:df:1e:49:a0:60:5e:be:c8:e1:
                    9f:50:de:dc:ff:1f:9d:73:e1:c4:8c:ff:c9:30:27:
                    bb:2a:42:af:d2:c2:64:a6:f0:5e:20:13:28:3e:20:
                    b2:33:06:87:54:4e:64:23:77:8f:ec:7c:80:d7:a5:
                    3f:de:98:f6:7f:03:8b:16:cb:1b:57:7a:0b:68:5a:
                    9d:c4:8c:33:67:d1:36:f7:2e:f5:85:8b:38:55:12:
                    e5:f4:5c:f9:f2:c4:71:b1:be:a8:db:41:4e:f1:7a:
                    03:b1:9b:f1:93:ff:dd:9a:6e:45:e4:5d:3c:22:08:
                    3c:ce:dc:c7:1d:93:87:35:28:0a:48:53:c9:11:11:
                    d4:e1:b0:a5:68:92:aa:bd:13:2e:03:e1:9a:cd:ef:
                    a2:f5:da:89:24:fe:64:c2:00:84:00:0a:a5:30:0f:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:55:E1:50:16:80:CC:2A:2A:D5:5B:F2:08:6C:17:C8:56:C9:D8:0B
            X509v3 Authority Key Identifier:
                keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2384::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:39:6a:89:2a:95:c9:13:c5:56:96:b1:d9:5b:fb:8d:62:e4:
         b7:32:d8:d8:1a:3d:b3:20:26:fc:a4:73:76:38:a7:8d:ce:4b:
         9e:8c:18:6d:2b:c7:ac:56:78:0a:df:d6:8e:da:4f:da:4c:db:
         67:0f:0d:dc:21:6a:30:95:bf:74:be:c1:25:b9:51:9c:a0:d5:
         a2:d1:54:3f:f5:ca:3c:d7:37:77:69:a7:5d:1c:34:b0:a3:a1:
         52:67:47:08:a4:af:0c:ca:e5:81:f0:28:2e:d5:35:a4:d6:ac:
         5e:b1:c4:86:9a:fa:97:14:4a:71:6e:5f:94:9c:e7:78:94:e1:
         68:43:f6:3d:a5:a5:5b:f6:89:b5:f7:d1:20:e1:79:bb:88:1c:
         5d:88:3f:31:33:71:77:ea:d4:b0:a3:08:68:1e:4e:84:d4:58:
         62:3b:da:fd:c6:6a:9c:d5:c9:01:a6:53:14:1f:b7:a8:23:d1:
         b0:86:93:ab:38:fc:49:bc:9c:f3:78:a5:12:22:cf:b1:a1:db:
         e2:2c:8f:1b:28:57:2f:48:67:cd:73:6a:31:40:50:6b:0c:26:
         c6:a3:1c:4f:02:30:d6:ca:ef:02:68:23:73:d0:41:4f:f8:29:
         66:6e:03:95:8d:a7:0e:35:67:0b:44:a3:c1:5a:8b:6f:6b:e5:
         84:3c:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----